Kungani i-VPN yesivakashi sakho ihluleka ngemuva kwe-NAT ye-VirtualBox?

Isiphequluli ngaphakathi komshini ongabonakali siyasebenza, kanti iklayenti le-VPN kuleso sivakashi alikwazi ukuthwala idatha. Isivakashi sinokuxhumana ngokusobala, ngakho iphutha lisezintweni ezidingwa iphrothokholi yangaphandle ye-VPN kanye nalokho i-NAT engabonakali ezokudlulisa. Izimo ezintathu zinquma umphumela: iyiphi inqubo ephethe i-VPN, ukushintshana kwangaphandle kubukeka kanjani ocingweni, nokuthi imodi ye-adaptha iyona yini oyicabangayo. Ukusho igama lesimo ongasingashintsha kuyisinqumo sonke.

Thola inqubo ye-VPN ngaphambi kokusola inethiwekhi

Qala ngokunquma ukuthi i-VPN isebenza ngaphakathi kwesivakashi noma kumashipha, ngoba izinhlelo ezimbili zehluleka ngezindlela ezihlukene. Iklayenti elingaphakathi kwesivakashi lakha uxhumano lwalo lwangaphandle nge-adaptha yesivakashi nanoma yiluphi ukuhumusha olungemuva kwayo. I-VPN yasemshipha ibamba ithrafikhi yesivakashi ngokwenqubomgomo yasemshipha ne-hypervisor, okuyindawo ehlukile yokubamba enemithetho yayo. Zingasebenza ngasikhathi sinye futhi zidide ubufakazi, ngakho khomba ukuthi iyiphi okufanele ithwale le thrafikhi ngaphambi kokuthinta noma iyiphi.

Bhala phansi imodi ye-adaptha yesivakashi manje, ngaphambi kokushintsha noma yini. Lelo nani elilodwa lichaza iningi lalokho okulandelayo, futhi yinto yokuqala umuntu ayokubuza yona kamuva.

Ukushintshana kwangaphandle kunquma ukuhambisana

Umhlahlandlela wenethiwekhi we-VirtualBox ubala imikhawulo ye-NAT ebalulekile lapha: awudlulisi ezinye iziphrothokholi ngaphandle kwe-TCP ne-UDP, i-GRE ishiwo njengengasekelwe, futhi i-PPTP inikezwa njengesibonelo esithintekile. I-PPTP isebenzisa ukushintshana kokulawula kwe-TCP ne-GRE yedatha, ngakho uxhumano lokulawula lungaphumelela kuyilapho indlela yedatha ingakwazi ukweqa lowo mkhawulo. Lezi zifakazi ezimbili ezihlukene, futhi eyodwa kuphela ekhuluma ngokuthwala ithrafikhi. Ukuvumela imbobo ye-TCP 47 emthethweni we-firewall akufani nokuvumela iphrothokholi ye-IP 47, futhi lezi ezimbili zihlale zididaniswa.

Gcina umkhawulo uboshelwe kulolu hlelo lwe-NAT hhayi kudivayisi ngayinye esebenzisa igama elithi NAT. Irawutha ebonakalayo ingadlulisa i-GRE ngaphandle kwesikhalo kuyilapho i-NAT engabonakali iyilahla, futhi enye i-hypervisor yenza ukuzikhethela kwayo mayelana nalokho ekudlulisayo. Lapho inhlangano inikeza ukuthutha okuvunyelwe ngaphakathi kwe-TCP noma i-UDP, sebenzisa iklayenti nophrofayela okusekelwayo kwayo kuleyo ndlela. Ukuhambisana kuyisidingo esisodwa phakathi kweziningi, futhi akusimisi ukuthembela kuseva noma imvume ye-akhawunti noma imizila yangasese esebenzayo.

Yini ibhuloho eliyishintshayo ngempela

Ibhuloho linikeza ikheli le-MAC lesivakashi engxenyeni ebonakalayo esikhundleni sokulifihla ngemuva kokuhumusha. Ngemuva kwalokho isivakashi sithatha ikheli kunoma yiseva ye-DHCP ekhonza leyo ngxenye, siphendula i-ARP yalelo kheli, futhi sibonakala kuswishi ephezulu njengelinye imbobo. Lokho kususa indlela yokuhumusha engabonakali, okuyisizathu esiqondile sokuthi iresiphi endala iyincomela, futhi kushintsha ezinye izinto ezintathu ngasikhathi sinye. Ukwenza amakheli manje kuvela engxenyeni yendawo hhayi ku-hypervisor, ukuchayeka kusho ukuthi isivakashi siyabonakala kuleyo ngxenye, futhi ukwamukelwa kuncike embotsheni yeswishi nasenqubomgomo yayo. Ngayinye yalezi ingaba isizathu sokwenqaba ushintsho, futhi akukho neyodwa ekhuluma ngephrothokholi ye-VPN.

Ukwakha ibhuloho akufaki isengezo esingekho, akunikezi i-ejenti eyimfihlo engatholakali, futhi akulungisi ukwenqatshwa kokuqinisekisa. Futhi akwenzi iphrothokholi ephelelwe yisikhathi ibe ukukhetha okuhle, futhi lapho umsebenzisi enokuthile okunakekelwayo okungena esikhundleni, yikho isinqumo hhayi ukushintsha i-hypervisor. Ukudluliswa kwembobo kuyindima yesithathu ngokuphelele: kushicilela isevisi engenayo futhi akwenzi lutho ngephrothokholi yangaphandle yeklayenti eliphumayo.

Imigudu emibili, imikhondo emibili yobufakazi

I-VPN yesivakashi idinga indlela esebenzisekayo isuka ku-interface yesivakashi iya kumlingani wayo ngaphambi kokuthi noma yiliphi ikheli langaphakathi noma umzila wangasese ube nokubaluleka. Lapho kukhona i-VPN yasemshipha, ingadlulisa noma ivimbe lokho kushintshana kwangaphandle ngokwenqubomgomo yayo, futhi ithumbu langaphakathi lesivakashi liqala kuphela ngemuva kokuphumelela kwelangaphandle. Ukufinyelela kwanoma yiluphi ungqimba akukwazi ukufundwa kusithonjana esisodwa esixhunyiwe noma kukheli lomphakathi lesiphequluli sasemshipha.

Gcina umlayezo wokuqala wephutha hhayi owokugcina, ngoba ukwehluleka kokuqala kuqamba ungqimba. Shintsha uhlelo olulodwa lwenethiwekhi olusekelwayo ngesikhathi, ngephrofayela efanayo yesivakashi nezicelo zokungena ezifanayo, ukuze ukuqhathanisa kube nencazelo. Nquma ngokwehluleka ukuthi yisiphi isigaba esiphukile: ukuhlanganiswa kwendawo, ukuthutha, ukuqinisekisa, noma ukufinyelela kwezinsiza ngemuva kokukhuphuka kwethumbu. Ngakunye kwazo kunomnini ohlukile, futhi kunye kuphela okungumbuzo we-hypervisor.

Yisiphi isimo esikuvimbayo ngempela

Manje isinqumo sincipha sibe yimibuzo emithathu enezimpendulo ezihlukene. Uma iphrothokholi yangaphandle ingaphandle kwe-TCP ne-UDP, imodi ye-NAT iyinkinga, futhi indlela eya phambili ibhuloho noma ukuthutha kwe-TCP/UDP okuvunyelwe. Uma ukushintshana kwangaphandle kuqedwa kanti indlela yedatha ayiqedwa, umkhawulo uyona leyo ebonwe ebufakazini besibili. Uma ithumbu likhuphuka izinsiza zingaphenduli, inkinga isivele yeqe i-hypervisor yaya ekuhambiseni noma enqubomgomo.

Bhala impendulo kanye nemodi ye-adaptha eceleni, kungenjalo umuntu olandelayo uzophinda intambama efanayo. Ngemuva kwanoma yikuphi ukulungiswa hlola uhlelo lokusebenza lwangempela nokuxazululwa kwamagama ngaphakathi kwesivakashi, bese uxhuma futhi uzame inqubomgomo yokwehluleka. Ikhasi lewebhu elisebenza ngethumbu lifakazela kuphela ukuthi indlela yewebhu iyasebenza, okuyisimangalo esincane kunalokho okuzwakala ngaleso sikhathi.